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Top Stories 

• Interstate 75/85 in Atlanta was closed for almost 3 hours February 2 while authorities 
investigated a suspicious package taped to the outside of a bridge, which was later rendered 
a non-explosive device. - WXIA 11 Atlanta (See item 6) 

• A gastrointestinal illness sickened 193 guests and 9 crew members aboard a Royal 
Caribbean cruise ship that returned to its port in Baltimore one day early February 2 due to 
an unspecified medical emergency. - WBAL 11 Baltimore (See item 7 ) 

• School districts in Illinois, Nebraska, Wisconsin, Ohio, and Michigan were closed February 
2 due to Winter Storm Linus that caused several deaths, over 1,300 flight cancellations, and 
several traffic accidents in the Midwest after dumping several inches of snow on the 
ground. - Weather.com (See item 19 ) 

• Firefighters continued February 2 to battle a 7-alarm fire that broke out January 31 at the 
Citistorage building in the Brooklyn area of New York City, while investigators worked to 
determine the source of the blaze. -WP1X 11 New York City (See item 27 ) 
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Energy Sector 



1. February 2, U.S. Environmental Protection Agency - (Utah) Newfield Production 
agrees to resolve alleged wetlands violations at production sites in Uintah and 
Duchesne counties (Utah). The U.S. Environmental Protection Agency reached a 
settlement February 2 with Newfield Production Company to resolve alleged Clean 
Water Act violations reported by Newfield through a 2012 self-audit to examine 
environmental compliance at 45 production sites in Utah. The company agreed to pay a 
$175,000 penalty and complete wetlands restoration and creation projects at 
productions sites in Uintah and Duchesne counties. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/ba80c6224532da6085257de0006a2e70 
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Chemical Industry Sector 

Nothing to report 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

2. January 30, Reuters - (International) BMW fixes security flaw in its in-car software. 
BMW reported January 30 that it fixed a security flaw which affected cars equipped 
with the company’s ConnectedDrive software using on-board SIM cards, which could 
have allowed hackers to unlock the doors and potentially access onboard vehicle 
computer systems of up to 2.2 million Rolls-Royce, Mini, and BMW vehicles. 

Source: http://www.reuters.com/article/2015/01/30/bmw-cvbersecurity- 
idUSL6N0V92VD20150130 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



3. February 2, Birmingham News - (Alabama) Former nonprofit CEO arrested, 
charged in $14 million health care fraud case. A former CEO of a Birmingham 
nonprofit was arrested and charged February 2 for his involvement in a scheme that 
included bank fraud, money laundering, and conspiracy in connection to his 
employment or involvement with Birmingham Health Care, Central Alabama 
Comprehensive Health, Birmingham Financial Credit Union, and several for-profit 
businesses known as Synergy Entities based on allegations that he diverted $14 million 
in funds to his private businesses over 6 years. 

Source: 

http://www.al.com/news/index.ssf/2015/02/former ceo of nonprofits to ai.html 

4. February 2, Reuters - (New Jersey; California) Financial adviser pleads guilty in 
California to investment scheme. A New Jersey financial adviser to professional 
athletes and entertainers pleaded guilty February 2 to charges of wire fraud in 
connection to presenting a scheme to an undercover FBI agent to exaggerate the costs 
of Burger King franchises to investors in San Diego by planning on telling investors 
that the franchises would be purchased for $37 million, more than double their actual 
cost. The financial advisor planned to fraudulently take a 50 percent ownership stake, 
and hoped to take millions of dollars “off the top” of the deal. 

Source: http://www.reuters.corn/article/2015/02/03/us-usa-crime-california- 
idUSKBN0F702M20 150203 

5. February 2, Securityweek - (International) Dyre banking trojan uses worm to spread 
via Microsoft Outlook. Researchers at Trend Micro discovered a new variant of the 
Dyre (Dyreza) malware in the form of a spam email containing the Upatre downloader 
that propagates itself via a worm that uses Microsoft Outlook to send emails to targets, 
including 355 sites belonging primarily to banks and Bitcoin wallets. 

Source: http://www.securitvweek.com/dvre-banking-trojan-uses-worm-spread- 
microsoft-outlook 
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Transportation Systems Sector 

6. February 3, WXIA 11 Atlanta - (Georgia) Downtown Connector reopens after 
package detonated. Interstate 75/85 in Atlanta, known as the Downtown Connector, 
was closed for almost 3 hours February 2 while authorities investigated a suspicious 
package that was taped to the outside of the 14th Street Bridge. A bomb squad 
responded to the scene and detonated the object that police later determined was not an 
explosive device. 

Source: http://www.llalive.com/story/news/local/downtown/2015/02/02/downtown- 
connector-suspicious-package/22754551/ 

7. February 3, WBAL 11 Baltimore - (Maryland) Royal Caribbean cruise ship returns 
early to Baltimore. A Royal Caribbean vessel, the Grandeur of the Seas, returned to 



the Port of Baltimore one day earlier than scheduled February 2 due to a medical 
emergency that required the transport of a passenger to a land-based hospital, while a 
gastrointestinal illness affected about 193 guests and 9 crew members aboard the ship. 
The U.S. Centers for Disease Control and Prevention will conduct an assessment to 
evaluate possible causes of the outbreak, and the ship was ordered to undergo a deep 
cleaning after the guests debarked. 

Source: http://www.wbakv.com/news/roval-caribbean-cruise-ship-retums-earlv-to- 
baltimore/3 1053844 

8. February 2, Associated Press - (National) Computer outage plagues Delta Air 
Lines’ flights. An unspecified number of Delta Air Lines custumers nationwide were 
unable to check in for flights using the airline’s Web site, mobile app, and airport 
kiosks February 2 due to a network malfunction that caused intermittent service delays 
and outages. A Delta spokesperson stated that the disruption was not system-wide and 
that the computer problem only caused a small number of delayed departures. 

Source: http://www.sltrib.com/home/2132748-155/computer-outage-plagues-delta-air- 
lines 



9. February 2, WCNC 36 Charlotte - (North Carolina) Highway 218 reopened after 
tractor-trailer wreck. Highway 218 in Union County was blocked for approximately 
4 hours February 2 after a semi-truck overturned when the driver lost control of the 
vehicle and slid onto the shoulder of the road. The driver was taken to a local hospital 
for minor injuries and crews responded to the scene to remove the wreckage. 

Source: http://www.wcnc.com/storv/news/traffic/2015/02/02/overturned-tractor-trailer- 
blocks-part-of-highway-218-in-union-co/22733227/ 

10. February 2, Associated Press - (Virginia) Va. DMV extends expiring credentials due 
to IT outage. The Virginia Department of Motor Vehicles (DMV) extended expiring 
driver’s licenses and other DMV-issued credentials following a service failure of the 
State’s IT provider that prompted the closure of DMV offices Statewide January 31. 
Crews worked to restore service and recover systems, allowing several offices to 
reopen later that day. 

Source: http://wavv.com/2015/02/02/va-dmv-extends-expiring-credentials-due-to-it- 
outage/ 

For another story, see item 19 
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Food and Agriculture Sector 

11. February 3, U.S. Food and Drug Administration - (National) The Spice Mill issues 
allergy alert on undeclared peanut protein in ground cumin & Cajun Seasoning 
products. The U.S. Food and Drug Administration reported February 2 that The Spice 
Mill voluntarily recalled its ground cumin and Cajun Seasoning products after it was 
discovered that an ingredient from a supplier used during the manufacturing process 
was contaminated with peanut proteins. The recalled products were sold at local 
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markets in Connecticut and through The Spice Mill’s Web site and retail store. 
Source: http://www.fda.gov/Safety/Recalls/ucm432761.htm 



12. February 2, Missoulian - (Montana) Grain bin busts in Wolf Point, spilling 20,000 
bushels of wheat. About 20,000 bushels of wheat spilled from a steel grain bin at the 
Columbia Grain-operated Gavilon Grain facility in Wolf Point January 31. Officials are 
investigating the cause of the incident and are working to determine if the grain can be 
salvaged as they survey the damage. 

Source: http://missoulian.com/news/state-and-regional/grain-bin-busts-in-wolf-point- 
spilling-bushels-of- wheat/article f56cb8c0-b65a-5766-80f4-dfb84a6bbe65.html 

13. February 2, U.S. Food and Drug Administration - (National) Middle East Bakery, 
Inc. issues allergy alert due to the potential for undeclared soy in select lots of 
Joseph’s bread products and Trader Joe's pita products. The U.S. Food and Drug 
Administration reported February 2 that Massachusetts-based Middle East Bakery, Inc., 
issued a recall for certain lots of Joseph’ s-branded bread products and Trader Joe’s- 
branded pita products due to undeclared soy. The recall was initiated following a 
temporary breakdown in the company’s production and packaging processes. 

Source: http://www.fda.gov/Safety/Recalls/ucm432682.htm 

14. February 2, U.S. Food and Drug Administration - (Connecticut; New Jersey; New 
York) Sole Grano LLC issues allergy alert on undeclared almonds & wheat in 
Organic Cranberry Low Fat Granola. The U.S. Food and Drug Administration 
announced January 30 that Sole Grano LLC recalled 12-ounce packages of its Lairway 
- Like No Other Market Organic Cranberry Low Lat Granola due to undeclared almond 
and wheat. The recalled product was sold at Lairway Stores in New Jersey, 

Connecticut, and New York. 

Source: http://www.fda.gov/Safety/Recalls/ucm432610.htm 
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Water and Wastewater Systems Sector 

15. February 3, Sidney Daily News - (Ohio) Boil advisory in effect. The Village of Anna 
remained under a boil advisory through at least Lebruary 4 following a water main 
break Lebruary 2 that was repaired later that day. Testing is underway to ensure the 
water in the line is safe for consumption before the boil advisory can be lifted. 

Source: http://www.sidnevdailynews.com/news/news/151645578/Boil-advisorv-in- 
effect 



Lor another story, see item 20 
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Healthcare and Public Health Sector 

16. February 3, Perkasie News-Herald - (Pennsylvania) Police: CVS employee stole 
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thousands of prescription painkillers from work. Police charged a CVS pharmacy 
employee January 28 for allegedly stealing approximately 2,000 Tylenol with Codeine 
tablets over the course of several months from the pharmacy’s Hilltown location. 
Source: 

http://www.montgomervnews.com/articles/2015/02/03/perkasie news herald/news/doc 



54d04c59c2d9b049179969.txt 



17. February 2, MassLive.com - (Massachusetts) Investigation into UMass Memorial 
Medial Group data breach ongoing. UMass Memorial Medical Group in 
Massachusetts notified up to 14,000 patients January 30 of a personal, health, and 
financial information breach that occurred January 7 to May 7, 2014 when a former 
employee accessed billing records outside normal job duties. 

Source: 

http://www.masslive.com/news/worcester/index.ssf/2015/02/investigation into umass 
memor.html 



For additional stories, see items 3, 22, and 26 
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Government Facilities Sector 

18. February 3, Hibbing Daily Tribune - (Montana) Washington Elementary closed 
Tuesday due to sewer issue. A sewer problem caused by a failed sump pump 
prompted the closure of Washington Elementary School in Hibbing February 3 when 
ground water and sewage flooded the basement of the school February 2. The water 
and sewage were removed from the basement and school officials worked on drying 
out the area. 

Source: http://www.hibbingrnn.com/news/local/washington-elementarv-closed- 
tuesday-due-to-sewer- issue/article 594ecb34-ab53-lle4-9949-b7af2864b9cf.html 

19. February 2, Weather.com - (National) Winter Storm Linus clobbers Midwest; 
several weather- related deaths in region. School districts in Illinois, Nebraska, 
Wisconsin, Ohio, and Michigan were closed February 2 due to Winter Storm Finus that 
caused several deaths, over 1,300 flight cancellations, and several traffic accidents in 
the Midwest after dumping several inches of snow on the ground. 

Source: http://www.weather.com/stoims/winter/news/winter-storm-linus-chicago-great- 
lakes-midwest-impacts 

20. February 2, Associated Press - (Mississippi) Ole Miss crews fix water line problems. 
The University of Mississippi campus in Oxford reopened February 2 after a water 
main break caused a loss in pressure and forced the closure of all campus buildings, 
including residence halls, office and academic buildings, and athletic venues. The 
campus remained under a boil-water order after crews repaired the ruptured line. 
Source: http://www.wapt.com/news/mississippi/ole-rniss-crews-working-on-water-line- 
problems/3 1050504 
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For another story, see item 22 
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Emergency Services Sector 

21. February 3, WECT 6 Wilmington - (North Carolina) Authorities arrest escaped 
Brunswick County inmate. An inmate who escaped from a Brunswick County 
detention center January 29 was recaptured by sheriffs deputies February 3 at a 
residence in Southport. The inmate managed to escape from the detention center by 
switching armbands with his brother who was being bonded out of jail. 

Source: http://www.wect.com/storv/28009549/authorities-arrest-escaped-brunswick- 
county-inmate 

22. February 2, Associated Press - (Louisiana) Audit: Fire marshal’s office needs to 
improve inspections. Louisiana’s legislative auditor released a report February 2 
which found that the State’s fire marshal’s office did not consistently inspect schools, 
universities, State buildings, and health facilities to ensure compliance with fire and 
safety codes. The auditor’s office spot-checked 278 buildings and found that 65 were 
not inspected during 2013, and reviewed 385 violations cited by the fire marshal from 
201 1 to 2013 and determined that the office never returned to re-inspect 21 percent of 
the violations. 

Source: http://www.ksl.com/index.php?nid=151&sid=33325927&title=audit-fire- 
marshals-office-needs-to-improve-inspections 

23. February 2, WMAQ 5 Chicago - (Illinois) Sheriff: One-third of jail staffers didn’t 
report to work. The Cook County Jail in Chicago was placed on lockdown with 
limited movement inside the jail February 2 due to a severe winter storm that dumped 
several inches of snow and caused about 36 percent of the jail’s staff to call in sick. 
Source: http://www.nbcchicago.com/news/local/cook-countv-jail-lockdown- 
290548911.html 
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Information Technology Sector 

24. February 3, Softpedia - (International) Security flaws in SerVision HVG video 
gateway grant access to the web interface. Researchers with the Computer 
Emergency Response Team Coordination Center at Carnegie Mellon University 
(CERT/CC) reported that two high-severity vulnerabilities in SerVision’s HVG video 
gateway product series which could allow unauthorized access to the unit’s web 
interface and enable users to log into the web interface with administrative rights were 
resolved in the latest revision of the firmware. The privilege elevation danger has yet to 
be mitigated. 

Source: http://news.softpedia.com/news/Security-Flaws-in-SerVision-HVG-Video- 
Gateway-Grant-Access-to-the-Web-Interface-471998.shtml 
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For another story, see item 5 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

25. February 3, WWJ 62 Detroit - (Michigan) Building evacuated after electrical 
problem sends manhole covers flying in downtown Detroit. A downtown Detroit 
office building was evacuated for more than 2 hours February 3 after an underground 
electrical problem filled the building’s basement with smoke and sent 3 manhole covers 
into the air. Authorities continue to investigate the incident. 

Source: http://detroit.cbslocal.com/2015/02/03/explosion-heard-felt-in-downtown- 
detroit/ 



26. February 3, Lewiston-Auburn Sun Journal - (Maine) Sparetime, Carbonite 
evacuated for reported CO leak. More than 100 people were evacuated February 3 
from a Lewiston building that houses Sparetime Recreation and 2 other businesses, 
including a medical office, due to elevated levels of carbon monoxide. Several 
employees were treated at the scene for symptoms related to carbon monoxide 
exposure, while firefighters worked to ventilate the building and authorities 
investigated the source of the leak. 

Source: http://www.suniournal.com/news/lewiston-aubum/2015/02/03/sparetime- 
carbonite-evacuated-reported-co-leak/1650682 

27. February 2, WPIX 11 New York City - (New York) Security of confidential docs 
called into question after Williamsburg storage facility fire. Firefighters continued 
February 2 to battle a 7-alarm fire that broke out January 31 at the Citistorage building 
in the Brooklyn area of New York City, while investigators worked to determine the 
source of the blaze. Officials are investigating if thousands of confidential documents, 
including legal and medical records that were held inside the storage facility may have 
been exposed during the incident, possibly compromising the personal information of 
an unknown number of individuals. 

Source: http://pixll.com/2015/02/02/securitv-of-confidential-docs-called-into- 
question-after-williamsburg-storage-facility-fire/ 



- 8 - 



For another story, see item 24 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq .dhs. gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert. gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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